Skip to content

Zizmor 1.25.0 brings a new error #723

@nickvergessen

Description

@nickvergessen
error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> workflow-templates/appstore-build-publish.yml:74:9
   |
11 | / on:
12 | |   release:
13 | |     types: [published]
   | |______________________- generally used when publishing artifacts generated at runtime
...
74 |           uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
   |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ enables caching by default
   |
   = note: audit confidence → Low

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> workflow-templates/documentation.yml:45:9
   |
11 | / on:
12 | |   pull_request:
13 | |   release:
14 | |     types: [published]
   | |______________________- generally used when publishing artifacts generated at runtime
...
45 |           uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
   |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ enables caching by default
   |
   = note: audit confidence → Low


Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions